program: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080)="7330cc36166c4adc5115ef0d0b20193ec21b980b9bb74567", &(0x7f0000000100)="f698693318e8a57bdf82ec30dec20d41aad0e5516f3802d4aaf6"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000003d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="140001020000000086a6a65802000004ef000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x44040) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8, 0x80000) read$snddsp(r2, &(0x7f0000000c80)=""/227, 0xe3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'tunl0\x00'}) timer_delete(0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080)="7330cc36166c4adc5115ef0d0b20193ec21b980b9bb74567", &(0x7f0000000100)="f698693318e8a57bdf82ec30dec20d41aad0e5516f3802d4aaf6"}}, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000003d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="140001020000000086a6a65802000004ef000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x44040) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8, 0x80000) (async) read$snddsp(r2, &(0x7f0000000c80)=""/227, 0xe3) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'tunl0\x00'}) (async) timer_delete(0x0) (async) [ 68.122915][ T5303] Bluetooth: hci0: command tx timeout [ 68.271409][ C0] ------------[ cut here ]------------ [ 68.273874][ C0] WARNING: CPU: 0 PID: 0 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xa08/0xce0 [ 68.277442][ C0] Modules linked in: [ 68.278947][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 68.282609][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.286494][ C0] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 68.288880][ C0] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 1e 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 68.297195][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00010086 [ 68.299680][ C0] RAX: dffffc0000000000 RBX: 1ffff11006536a3f RCX: ffffffff8e6965c0 [ 68.303000][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.305939][ C0] RBP: ffffc90000007cf8 R08: ffffffff816473dc R09: ffffffff81647381 [ 68.308928][ C0] R10: 0000000000000002 R11: ffffffff8e6965c0 R12: ffff8880329b51e0 [ 68.311667][ C0] R13: 1ffff11006536a4c R14: ffff8880329b51f8 R15: ffff8880329b52a0 [ 68.314554][ C0] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 68.317727][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.320134][ C0] CR2: 00007f10843f4fe0 CR3: 000000004120a000 CR4: 0000000000352ef0 [ 68.322995][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.326085][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.329067][ C0] Call Trace: [ 68.330269][ C0] [ 68.331353][ C0] ? __warn+0x165/0x4d0 [ 68.332843][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 68.334810][ C0] ? report_bug+0x2b3/0x500 [ 68.336424][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 68.338455][ C0] ? handle_bug+0x60/0x90 [ 68.340107][ C0] ? exc_invalid_op+0x1a/0x50 [ 68.341928][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 68.343899][ C0] ? prepare_signal+0x931/0xc90 [ 68.345738][ C0] ? prepare_signal+0x98c/0xc90 [ 68.347383][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 68.349462][ C0] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 68.351527][ C0] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 68.353791][ C0] posix_timer_fn+0xe2/0x160 [ 68.355380][ C0] ? __pfx_posix_timer_fn+0x10/0x10 [ 68.357259][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 68.359397][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 68.361530][ C0] ? kvm_clock_get_cycles+0x52/0x70 [ 68.363434][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 68.365721][ C0] hrtimer_interrupt+0x403/0xa40 [ 68.367427][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 68.369412][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 68.371222][ C0] [ 68.372161][ C0] [ 68.373197][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.375351][ C0] RIP: 0010:default_idle+0x13/0x20 [ 68.377147][ C0] Code: 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 6c 3c 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 68.384780][ C0] RSP: 0018:ffffffff8e607d68 EFLAGS: 000002c2 [ 68.387606][ C0] RAX: 61420b6da14b8200 RBX: ffffffff817457dc RCX: 000000000000ab89 [ 68.390841][ C0] RDX: 0000000000000001 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb0a0 [ 68.393842][ C0] RBP: ffffffff8e607eb8 R08: ffff88801fc37cdb R09: 1ffff11003f86f9b [ 68.396654][ C0] R10: dffffc0000000000 R11: ffffed1003f86f9c R12: 1ffffffff1cc0fc6 [ 68.399336][ C0] R13: 1ffffffff1cd2cb8 R14: 0000000000000000 R15: dffffc0000000000 [ 68.402038][ C0] ? do_idle+0x22c/0x5c0 [ 68.403538][ C0] default_idle_call+0x74/0xb0 [ 68.405244][ C0] do_idle+0x22c/0x5c0 [ 68.406702][ C0] ? __pfx___schedule+0x10/0x10 [ 68.408562][ C0] ? __pfx_do_idle+0x10/0x10 [ 68.410232][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.412217][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.414806][ C0] ? rest_init+0x31/0x300 [ 68.416438][ C0] ? rest_init+0x31/0x300 [ 68.418011][ C0] cpu_startup_entry+0x42/0x60 [ 68.419788][ C0] rest_init+0x2dc/0x300 [ 68.421393][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 68.423390][ C0] start_kernel+0x47f/0x500 [ 68.425136][ C0] x86_64_start_reservations+0x2a/0x30 [ 68.427007][ C0] x86_64_start_kernel+0x9f/0xa0 [ 68.428899][ C0] common_startup_64+0x13e/0x147 [ 68.430779][ C0] [ 68.432006][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.435198][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 68.439184][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.443480][ C0] Call Trace: [ 68.444706][ C0] [ 68.445705][ C0] dump_stack_lvl+0x241/0x360 [ 68.447416][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.452784][ C0] ? __pfx__printk+0x10/0x10 [ 68.454464][ C0] ? _printk+0xd5/0x120 [ 68.456013][ C0] ? __init_begin+0x41000/0x41000 [ 68.457955][ C0] ? vscnprintf+0x5d/0x90 [ 68.459567][ C0] panic+0x349/0x880 [ 68.460915][ C0] ? __warn+0x174/0x4d0 [ 68.462466][ C0] ? __pfx_panic+0x10/0x10 [ 68.464171][ C0] ? common_startup_64+0x13e/0x147 [ 68.466061][ C0] __warn+0x344/0x4d0 [ 68.467542][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 68.469686][ C0] report_bug+0x2b3/0x500 [ 68.471274][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 68.473195][ C0] handle_bug+0x60/0x90 [ 68.474648][ C0] exc_invalid_op+0x1a/0x50 [ 68.476347][ C0] asm_exc_invalid_op+0x1a/0x20 [ 68.478130][ C0] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 68.480314][ C0] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 1e 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 68.487262][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00010086 [ 68.489445][ C0] RAX: dffffc0000000000 RBX: 1ffff11006536a3f RCX: ffffffff8e6965c0 [ 68.492423][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.495340][ C0] RBP: ffffc90000007cf8 R08: ffffffff816473dc R09: ffffffff81647381 [ 68.498309][ C0] R10: 0000000000000002 R11: ffffffff8e6965c0 R12: ffff8880329b51e0 [ 68.501263][ C0] R13: 1ffff11006536a4c R14: ffff8880329b51f8 R15: ffff8880329b52a0 [ 68.504268][ C0] ? prepare_signal+0x931/0xc90 [ 68.506160][ C0] ? prepare_signal+0x98c/0xc90 [ 68.508011][ C0] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 68.510171][ C0] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 68.512236][ C0] posix_timer_fn+0xe2/0x160 [ 68.513896][ C0] ? __pfx_posix_timer_fn+0x10/0x10 [ 68.515813][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 68.517674][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 68.519805][ C0] ? kvm_clock_get_cycles+0x52/0x70 [ 68.521742][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 68.523863][ C0] hrtimer_interrupt+0x403/0xa40 [ 68.525656][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 68.527803][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 68.529779][ C0] [ 68.530843][ C0] [ 68.531915][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.533981][ C0] RIP: 0010:default_idle+0x13/0x20 [ 68.535807][ C0] Code: 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 6c 3c 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 68.542766][ C0] RSP: 0018:ffffffff8e607d68 EFLAGS: 000002c2 [ 68.545014][ C0] RAX: 61420b6da14b8200 RBX: ffffffff817457dc RCX: 000000000000ab89 [ 68.548028][ C0] RDX: 0000000000000001 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb0a0 [ 68.551211][ C0] RBP: ffffffff8e607eb8 R08: ffff88801fc37cdb R09: 1ffff11003f86f9b [ 68.554290][ C0] R10: dffffc0000000000 R11: ffffed1003f86f9c R12: 1ffffffff1cc0fc6 [ 68.557342][ C0] R13: 1ffffffff1cd2cb8 R14: 0000000000000000 R15: dffffc0000000000 [ 68.560231][ C0] ? do_idle+0x22c/0x5c0 [ 68.562090][ C0] default_idle_call+0x74/0xb0 [ 68.564295][ C0] do_idle+0x22c/0x5c0 [ 68.566234][ C0] ? __pfx___schedule+0x10/0x10 [ 68.568592][ C0] ? __pfx_do_idle+0x10/0x10 [ 68.570755][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.573239][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 68.575577][ C0] ? rest_init+0x31/0x300 [ 68.577181][ C0] ? rest_init+0x31/0x300 [ 68.578796][ C0] cpu_startup_entry+0x42/0x60 [ 68.580589][ C0] rest_init+0x2dc/0x300 [ 68.582371][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 68.584408][ C0] start_kernel+0x47f/0x500 [ 68.586172][ C0] x86_64_start_reservations+0x2a/0x30 [ 68.588329][ C0] x86_64_start_kernel+0x9f/0xa0 [ 68.590196][ C0] common_startup_64+0x13e/0x147 [ 68.592136][ C0] [ 68.593603][ C0] Kernel Offset: disabled [ 68.595495][ C0] Rebooting in 86400 seconds..